Hacker News Reader

Makes you wonder if some rogue device/adapter/charger could deliver malware (sploit/trickery) to it before or after it's booted from the host.

View on HN

Unlikely since the Apple adapter contains no software. The firmware is loaded by the host device when it's plugged in.

Doesn’t that mean that a rogue device that did contain software and ignored the incoming packet might actually be trusted by the host device when it shouldn’t be? The twitter thread did say the firmware payload contained no personalization (like encryption keys, perhaps).

> The twitter thread did say the firmware payload contained no personalization (like encryption keys, perhaps).

To be clear, this just means that the firmware isn't tied to a specific device via the normal ECID/nonce pair like a normal iOS update is.

Reply on news.ycombinator.com